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IN THE CLAIMS ; 

A listing of the status of all claims 1-21 in the present 
patent application is provided below. 

1 (Previously Amended) . A method for tracing source addresses 
of packets, the method comprising: 

identifying at least part of a source address of a packet; 

determining whether the at least part of the source address 
matches at least one source address recorded within a 
predetermined time period prior to arrival of the packet; and 

routing the packet if the at least part of the source 
address matches at least one source address recorded within the 
predetermined time period prior to the arrival of the packet. 

2 (Original) . The method according to claim 1, where the at 
least one source address is recorded in a hierarchical data 
structure . 

3 (Original) . The method according to claim 1, where a Last 
Time Seen (LTS) value associated with each of the at least one 
source address is recorded. 

4 (Previously Presented) . The method according to claim 1, 
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further comprising: 

recording an arrival time of the packet. 

5 (Original) . The method according to claim 1, further 
comprising : 

routing the packet with a warning if the at least part of 
the source address does not match at least one source address 
recorded within the predetermined time period prior to the 
arrival of the packet; and 

recording the at least part of the source address and an 
arrival time of the packet. 

6 (Original) . The method according to claim 5, where the 
warning is recorded in a read-only medium. 

7 (Original) . The method according to claim 1, further 
comprising issuing a warning and discarding the packet if the at 
least part of the source address does not match at least one 
source address recorded within the predetermined time period 
prior to the arrival of the packet . 

8 (Original) . The method according to claim 7, where the 
warning is recorded in a read-only medium. 
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9 (Original) . The method according to claim 1, where the source 
address of the packet is an internet protocol (IP) address. 

10 (Cancelled) . 

11 (Previously Presented) . At least one processor readable 
medium for storing a computer program of instructions configured 
to be readable by at least one processor for instructing the at 
least one processor to execute a computer process for performing 
the method as recited in claim 1. 

12 (Previously Presented) . A system for tracing source 
addresses of packets comprising at least one network element, 
where the at least one network element comprises: 

a processor module that identifies at least part of a 
source address of a packet, determines whether the at least part 
of the source address matches at least one source address 
recorded within a predetermined time period prior to arrival of 
the packet, and routes the packet if the at least part of the 
source address matches at least one source address recorded 
within the predetermined time period prior to the arrival of the 
packet; and 
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a storage module that stores the at least one source 

address recorded within a predetermined time period prior to 

arrival of the packet . 

13 (Original) . The system according to claim 12, where the at 
least one source address is recorded in a hierarchical data 
structure . 

14 (Original). The system according to claim 12, where a Last 
Time Seen (LTS) value associated with each of the at least one 
source address is recorded. 

15 (Previously Presented). The system according to claim 12, 
where the processor module is further adapted to — record an 
arrival time of the packet. 

16 (Previously Presented). The system according to claim 12, 
where the processor module is further adapted to: 

route the packet with a warning if the at least part of the 
source address does not match at least one source address 
recorded within the predetermined time period prior to the 
arrival of the packet; and 

record the at least part of the source address and an 
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arrival time of the packet. 

17 (Original) . The system according to claim 16, where the 
warning is recorded in a read-only medium. 

18 (Original) . The system according to claim 12, where the 
processor module is further adapted to issue a warning and 
discard the packet if the at least part of the source address 
does not match at least one source address recorded within the 
predetermined time period prior to the arrival of the packet. 

19 (Original) . The system according to claim 18, where the 
warning is recorded in a read-only medium. 

2 0 (Original). The system according to claim 12, where the 
source address of the packet is an internet protocol (IP) 
address . 

21 (Previously Presented) . A system for tracing source 

addresses of packets, the system comprising: 

means for identifying at least part of a source address of 
a packet ; and 

means for determining whether the at least part of the 
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source address matches at least one source address recorded 

within a predetermined time period prior to arrival of the 

packet ; and 

means for routing the packet if the at least part of the 
source address matches at least one source address recorded 
within the predetermined time period prior to the arrival of the 
packet . 
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